npm - @staff0rd/assist - Versions diffs - 0.219.0 → 0.220.1 - Mend

@staff0rd/assist 0.219.0 → 0.220.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/README.md CHANGED Viewed

@@ -88,7 +88,14 @@ After installation, the `assist` command will be available globally. You can als
 - `assist prs fixed <comment-id> <sha>` - Reply with commit link and resolve thread
 - `assist prs wontfix <comment-id> <reason>` - Reply with reason and resolve thread
 - `assist prs comment <path> <line> <body>` - Add a line comment to the pending review
-- `assist review [--no-prompt] [--submit] [--force] [--refine] [--apply] [--verbose]` - Run Claude and Codex in parallel to review the open PR for the current branch. The diff is fetched from GitHub (base SHA → head SHA via `gh pr diff`), so stale local base branches don't pollute the review; fails fast if no PR is open. By default, prompts before posting line-bound comments and then prompts again to submit the pending review (defaulting to no). Cached `claude.md` / `codex.md` / `synthesis.md` are reused when present; if any reviewer is re-run, the synthesis is invalidated. `--no-prompt` skips all confirmations. `--submit` defaults the submit prompt to yes (or auto-submits when combined with `--no-prompt`). `--force` clears all cached files and re-runs every phase. `--refine` skips posting and instead launches an interactive Claude session that walks through `synthesis.md` and edits it in place; a subsequent `assist review` (no flag) reuses the refined file and posts only the surviving findings. `--apply` skips posting and instead launches an interactive Claude session that walks through each remaining finding asking apply/skip; applied findings have their code fix made in the working tree (unstaged) and are removed from `synthesis.md`, while skipped findings stay so a subsequent `assist review` posts them. `--apply` cannot be combined with `--refine`. `--verbose` disables the stacked-spinner UI and falls back to per-line log output (per-tool lines, starting/done lines); non-TTY environments (CI) automatically fall back to verbose-style output
+- `assist review [sha] [options]` - Run Claude and Codex in parallel to review the open PR for the current branch. The diff is fetched from GitHub (base SHA → head SHA via `gh pr diff`), so stale local base branches don't pollute the review; fails fast if no PR is open. By default, prompts before posting line-bound comments and then prompts again to submit the pending review (defaulting to no). Cached `claude.md` / `codex.md` / `synthesis.md` are reused when present; if any reviewer is re-run, the synthesis is invalidated.
+  - `[sha]` - Review that commit's diff (`sha^..sha`) instead of the open PR. Files land under `.assist/reviews/<shortSha>/`, no GitHub lookup or posting happens, and `--refine` / `--apply` / `--submit` are rejected
+  - `--no-prompt` - Skip all confirmations
+  - `--submit` - Default the submit prompt to yes (or auto-submit when combined with `--no-prompt`)
+  - `--force` - Clear all cached files and re-run every phase
+  - `--refine` - Skip posting; launch an interactive Claude session that walks through `synthesis.md` and edits it in place. A subsequent `assist review` reuses the refined file and posts only the surviving findings
+  - `--apply` - Skip posting; launch an interactive Claude session that walks through each finding asking apply/skip. Applied findings are fixed in the working tree (unstaged) and removed from `synthesis.md`; skipped findings stay so a subsequent `assist review` posts them. Cannot be combined with `--refine`
+  - `--verbose` - Disable the stacked-spinner UI and fall back to per-line log output. Non-TTY environments (CI) automatically use this mode
 - `assist news` - Start the news web UI showing latest RSS feed items (same as `news web`)
 - `assist news add [url]` - Add an RSS feed URL to the config
 - `assist news web [-p, --port <number>]` - Start a web view of the news feeds (default port 3001)

package/claude/CLAUDE.md CHANGED Viewed

@@ -11,6 +11,4 @@ When using extract, name the destination file after the exported function (e.g.
 Do not modify `claude/settings.json` without asking the user first. Only read-only commands should be added to the allow list — write operations (add, remove, set, delete) must require confirmation.
-When the user mentions a Jira issue key (e.g. `BAD-671`, `PROJ-123`), use these commands to fetch context:
-- `assist jira view <issue-key>` — print the title and description
-- `assist jira ac <issue-key>` — print acceptance criteria
+When the user mentions a Jira issue key (e.g. `BAD-671`, `PROJ-123`), use the Atlassian MCP to fetch context.

package/dist/index.js CHANGED Viewed

@@ -6,7 +6,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@staff0rd/assist",
-  version: "0.219.0",
+  version: "0.220.1",
   type: "module",
   main: "dist/index.js",
   bin: {
@@ -6135,9 +6135,9 @@ import { existsSync as existsSync23, mkdirSync as mkdirSync6, readFileSync as re
 import { homedir as homedir6 } from "os";
 import { join as join22 } from "path";
-// src/commands/permitCliReads/assertCliExists.ts
+// src/shared/checkCliAvailable.ts
 import { execSync as execSync17 } from "child_process";
-function assertCliExists(cli) {
+function checkCliAvailable(cli) {
   const binary = cli.split(/\s+/)[0];
   const opts = {
     encoding: "utf-8",
@@ -6145,16 +6145,24 @@ function assertCliExists(cli) {
   };
   try {
     execSync17(`command -v ${binary}`, opts);
+    return true;
   } catch {
     try {
       execSync17(`where ${binary}`, opts);
+      return true;
     } catch {
-      console.error(`CLI "${cli}" not found in PATH`);
-      process.exit(1);
+      return false;
     }
   }
 }
+// src/commands/permitCliReads/assertCliExists.ts
+function assertCliExists(cli) {
+  if (checkCliAvailable(cli)) return;
+  console.error(`CLI "${cli}" not found in PATH`);
+  process.exit(1);
+}
 // src/commands/permitCliReads/colorize.ts
 import chalk66 from "chalk";
 function colorize(plainOutput) {
@@ -11639,60 +11647,6 @@ function registerRefactor(program2) {
   registerRestructure(refactorCommand);
 }
-// src/commands/review/buildRequest.ts
-import { execSync as execSync38 } from "child_process";
-// src/commands/review/fetchPrDiffInfo.ts
-import { execSync as execSync37 } from "child_process";
-function getCurrentBranch2() {
-  return execSync37("git rev-parse --abbrev-ref HEAD", {
-    encoding: "utf-8"
-  }).trim();
-}
-function fetchPrDiffInfo() {
-  const { org, repo } = getRepoInfo();
-  const branch = getCurrentBranch2();
-  const fields = "number,baseRefName,baseRefOid,headRefName,headRefOid";
-  let raw;
-  try {
-    raw = execSync37(`gh pr view ${branch} --json ${fields} -R ${org}/${repo}`, {
-      encoding: "utf-8",
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-  } catch (error) {
-    if (error instanceof Error && error.message.includes("no pull requests")) {
-      console.error(
-        `Error: No open pull request found for branch \`${branch}\`. Open a PR for this branch before running \`assist review\`.`
-      );
-      process.exit(1);
-    }
-    throw error;
-  }
-  const parsed = JSON.parse(raw);
-  return {
-    prNumber: parsed.number,
-    baseRef: parsed.baseRefName,
-    baseSha: parsed.baseRefOid,
-    headRef: parsed.headRefName,
-    headSha: parsed.headRefOid
-  };
-}
-function fetchPrChangedFiles(prNumber) {
-  const { org, repo } = getRepoInfo();
-  const out = execSync37(`gh pr diff ${prNumber} --name-only -R ${org}/${repo}`, {
-    encoding: "utf-8",
-    maxBuffer: 64 * 1024 * 1024
-  });
-  return out.trim().split("\n").filter(Boolean);
-}
-function fetchPrDiff(prNumber) {
-  const { org, repo } = getRepoInfo();
-  return execSync37(`gh pr diff ${prNumber} -R ${org}/${repo}`, {
-    encoding: "utf-8",
-    maxBuffer: 256 * 1024 * 1024
-  });
-}
 // src/commands/review/formatPriorComments.ts
 function threadKey(c, byId) {
   if (c.threadId) return c.threadId;
@@ -11743,30 +11697,6 @@ ${blocks.join("\n\n")}`;
 }
 // src/commands/review/buildRequest.ts
-function gatherContext() {
-  const branch = execSync38("git rev-parse --abbrev-ref HEAD", {
-    encoding: "utf-8"
-  }).trim();
-  const sha = execSync38("git rev-parse HEAD", { encoding: "utf-8" }).trim();
-  const shortSha = execSync38("git rev-parse --short=7 HEAD", {
-    encoding: "utf-8"
-  }).trim();
-  const prInfo = fetchPrDiffInfo();
-  const changedFiles = fetchPrChangedFiles(prInfo.prNumber);
-  const diff2 = fetchPrDiff(prInfo.prNumber);
-  return {
-    branch,
-    sha,
-    shortSha,
-    prNumber: prInfo.prNumber,
-    baseRef: prInfo.baseRef,
-    baseSha: prInfo.baseSha,
-    headRef: prInfo.headRef,
-    headSha: prInfo.headSha,
-    changedFiles,
-    diff: diff2
-  };
-}
 function formatFiles(files) {
   if (files.length === 0) return "(none)";
   return files.map((file) => `- ${file}`).join("\n");
@@ -11790,6 +11720,23 @@ ${formatFiles(context.changedFiles)}
 ${priorBlock}
 ## Diff (PR #${context.prNumber}: ${context.baseSha}..${context.headSha})
+\`\`\`diff
+${context.diff.trimEnd()}
+\`\`\`
+`;
+}
+function buildShaRequest(context) {
+  return `# Code review request
+- Commit: \`${context.sha}\`
+- Parent: \`${context.parentSha}\`
+## Changed files
+${formatFiles(context.changedFiles)}
+## Diff (commit ${context.sha}: ${context.parentSha}..${context.sha})
 \`\`\`diff
 ${context.diff.trimEnd()}
 \`\`\`
@@ -11798,13 +11745,8 @@ ${context.diff.trimEnd()}
 // src/commands/review/buildReviewPaths.ts
 import { join as join35 } from "path";
-function buildReviewPaths(repoRoot, branch, shortSha) {
-  const reviewDir = join35(
-    repoRoot,
-    ".assist",
-    "reviews",
-    `${branch}-${shortSha}`
-  );
+function buildReviewPaths(repoRoot, key) {
+  const reviewDir = join35(repoRoot, ".assist", "reviews", key);
   return {
     reviewDir,
     requestPath: join35(reviewDir, "request.md"),
@@ -11815,9 +11757,9 @@ function buildReviewPaths(repoRoot, branch, shortSha) {
 }
 // src/commands/review/fetchExistingComments.ts
-import { execSync as execSync39 } from "child_process";
+import { execSync as execSync37 } from "child_process";
 function fetchRawComments(org, repo, prNumber) {
-  const out = execSync39(
+  const out = execSync37(
     `gh api --paginate repos/${org}/${repo}/pulls/${prNumber}/comments`,
     { encoding: "utf-8", maxBuffer: 64 * 1024 * 1024 }
   );
@@ -11847,6 +11789,86 @@ function fetchExistingComments() {
   });
 }
+// src/commands/review/gatherContext.ts
+import { execSync as execSync39 } from "child_process";
+// src/commands/review/fetchPrDiffInfo.ts
+import { execSync as execSync38 } from "child_process";
+function getCurrentBranch2() {
+  return execSync38("git rev-parse --abbrev-ref HEAD", {
+    encoding: "utf-8"
+  }).trim();
+}
+function fetchPrDiffInfo() {
+  const { org, repo } = getRepoInfo();
+  const branch = getCurrentBranch2();
+  const fields = "number,baseRefName,baseRefOid,headRefName,headRefOid";
+  let raw;
+  try {
+    raw = execSync38(`gh pr view ${branch} --json ${fields} -R ${org}/${repo}`, {
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+  } catch (error) {
+    if (error instanceof Error && error.message.includes("no pull requests")) {
+      console.error(
+        `Error: No open pull request found for branch \`${branch}\`. Open a PR for this branch before running \`assist review\`.`
+      );
+      process.exit(1);
+    }
+    throw error;
+  }
+  const parsed = JSON.parse(raw);
+  return {
+    prNumber: parsed.number,
+    baseRef: parsed.baseRefName,
+    baseSha: parsed.baseRefOid,
+    headRef: parsed.headRefName,
+    headSha: parsed.headRefOid
+  };
+}
+function fetchPrChangedFiles(prNumber) {
+  const { org, repo } = getRepoInfo();
+  const out = execSync38(`gh pr diff ${prNumber} --name-only -R ${org}/${repo}`, {
+    encoding: "utf-8",
+    maxBuffer: 64 * 1024 * 1024
+  });
+  return out.trim().split("\n").filter(Boolean);
+}
+function fetchPrDiff(prNumber) {
+  const { org, repo } = getRepoInfo();
+  return execSync38(`gh pr diff ${prNumber} -R ${org}/${repo}`, {
+    encoding: "utf-8",
+    maxBuffer: 256 * 1024 * 1024
+  });
+}
+// src/commands/review/gatherContext.ts
+function gatherContext() {
+  const branch = execSync39("git rev-parse --abbrev-ref HEAD", {
+    encoding: "utf-8"
+  }).trim();
+  const sha = execSync39("git rev-parse HEAD", { encoding: "utf-8" }).trim();
+  const shortSha = execSync39("git rev-parse --short=7 HEAD", {
+    encoding: "utf-8"
+  }).trim();
+  const prInfo = fetchPrDiffInfo();
+  const changedFiles = fetchPrChangedFiles(prInfo.prNumber);
+  const diff2 = fetchPrDiff(prInfo.prNumber);
+  return {
+    branch,
+    sha,
+    shortSha,
+    prNumber: prInfo.prNumber,
+    baseRef: prInfo.baseRef,
+    baseSha: prInfo.baseSha,
+    headRef: prInfo.headRef,
+    headSha: prInfo.headSha,
+    changedFiles,
+    diff: diff2
+  };
+}
 // src/commands/review/postReviewToPr.ts
 import { readFileSync as readFileSync29 } from "fs";
@@ -12202,68 +12224,18 @@ async function runApplySession(synthesisPath) {
   await done2;
 }
-// src/commands/review/runReviewPipeline.ts
-import { existsSync as existsSync35, unlinkSync as unlinkSync12 } from "fs";
-// src/commands/review/buildReviewerStdin.ts
-var REVIEW_PROMPT = `You are acting as a reviewer for a proposed code change made by another engineer. The full review request \u2014 branch, base, changed files, and unified diff \u2014 is in request.md in the current working directory.
-Read request.md, then produce a thorough code review in Markdown.
-## When to flag a finding
-A finding is worth raising only if all of the following hold:
-1. It meaningfully impacts the accuracy, performance, security, or maintainability of the code.
-2. The issue is discrete and actionable \u2014 not a vague observation about the codebase or a tangle of several things.
-3. Fixing it does not demand more rigour than the rest of the codebase already shows (e.g. don't ask for exhaustive input validation in a repo of one-off scripts).
-4. The issue was introduced by this change. Do not flag pre-existing bugs.
-5. The original author would likely fix it if made aware.
-6. It does not rely on unstated assumptions about the codebase or author's intent.
-7. You can name the concretely affected code path. Speculation that a change *might* disrupt something elsewhere is not enough \u2014 identify the other code that is provably affected.
-8. It is clearly not an intentional change by the author.
-## How to write the comment (Impact + Recommendation)
-1. Make clear *why* the issue is a bug.
-2. Communicate severity accurately \u2014 do not inflate.
-3. Keep it brief: at most one paragraph of prose. Avoid line breaks inside the natural-language flow unless needed for a code fragment.
-4. Do not paste code chunks longer than 3 lines. Wrap short snippets in inline code or a fenced block.
-5. State explicitly the scenarios, environments, or inputs needed for the bug to manifest \u2014 and signal up front that severity depends on those factors.
-6. Tone is matter-of-fact: not accusatory, not gushing. Read as a helpful assistant, not a performative human reviewer.
-7. Write so the author grasps the point on first read.
-8. Avoid flattery and filler ("Great job\u2026", "Thanks for\u2026"). They are not useful to the author.
-Ignore trivial style unless it obscures meaning or violates a documented standard. One finding per distinct issue.
-## How many findings to return
-List every finding that the original author would want to know about and fix. Do not stop at the first qualifying one. If nothing clears the bar above, return no findings \u2014 empty is better than padded.
-## Output format
-For each finding include:
-- Severity (blocker, major, minor, nit) \u2014 see rubric below
-- File and line (e.g. \`src/foo.ts:42\`) when the finding is tied to a specific location
-- Impact: what could go wrong, including the conditions under which it manifests
-- Recommendation: a concrete change
-Severity rubric:
-- **blocker** \u2014 ships broken behaviour: crash, data loss, security hole, breaks the build or existing tests, or violates a stated requirement.
-- **major** \u2014 likely bug, missing error handling on a real failure mode, or a regression in existing behaviour. Not "this could be cleaner" or "this might be slow."
-- **minor** \u2014 narrow correctness or clarity issue with limited blast radius; worth fixing but not urgent.
-- **nit** \u2014 style, naming, micro-refactors, comment wording; reviewer would not block on it.
-Default to the lower tier when uncertain. Code-style preferences, refactor suggestions, and "I would have written it differently" belong in nit \u2014 not major. A finding is only major if you can name a concrete failure mode or regression.
-Group findings by severity. If you have no findings in a category, omit it. End with a short overall summary.
-Output only the review Markdown. Do not include any preamble or commentary about the process.`;
-function buildReviewerStdin(requestPath) {
-  return `${REVIEW_PROMPT}
-The review request is at: ${requestPath}
-`;
+// src/commands/review/cachedReviewerResult.ts
+import { statSync as statSync4 } from "fs";
+function cachedReviewerResult(name, outputPath) {
+  let size;
+  try {
+    size = statSync4(outputPath).size;
+  } catch {
+    return null;
+  }
+  if (size === 0) return null;
+  console.log(`[${name}] cached \u2192 ${outputPath} (${size} bytes)`);
+  return { name, outputPath, exitCode: 0, stderr: "" };
 }
 // src/commands/review/MultiSpinner.ts
@@ -12368,18 +12340,114 @@ var MultiSpinner = class {
   }
 };
-// src/commands/review/cachedReviewerResult.ts
-import { statSync as statSync4 } from "fs";
-function cachedReviewerResult(name, outputPath) {
-  let size;
-  try {
-    size = statSync4(outputPath).size;
-  } catch {
-    return null;
+// src/commands/review/ensureCodexAvailable.ts
+import { spawnSync as spawnSync3 } from "child_process";
+function runNpmInstall() {
+  const result = spawnSync3("npm", ["install", "-g", "@openai/codex"], {
+    stdio: "inherit",
+    shell: true
+  });
+  return result.status === 0 && result.error === void 0;
+}
+async function ensureCodexAvailable() {
+  if (checkCliAvailable("codex")) return "available";
+  console.log("codex CLI was not found on PATH.");
+  const install = await promptConfirm(
+    "Install @openai/codex globally via npm install -g @openai/codex?",
+    true
+  );
+  if (!install) {
+    console.log("Skipping codex reviewer.");
+    return "skipped";
   }
-  if (size === 0) return null;
-  console.log(`[${name}] cached \u2192 ${outputPath} (${size} bytes)`);
-  return { name, outputPath, exitCode: 0, stderr: "" };
+  console.log("Installing @openai/codex...");
+  if (!runNpmInstall()) {
+    console.error(
+      "npm install -g @openai/codex failed. Skipping codex reviewer."
+    );
+    return "skipped";
+  }
+  if (checkCliAvailable("codex")) return "available";
+  console.error(
+    "codex still not found on PATH after install. Skipping codex reviewer."
+  );
+  return "skipped";
+}
+// src/commands/review/planCodexReviewer.ts
+async function planCodexReviewer(codexPath) {
+  const cached = cachedReviewerResult("codex", codexPath);
+  if (cached) return { kind: "cached", cached };
+  const status2 = await ensureCodexAvailable();
+  if (status2 === "available") return { kind: "run" };
+  return { kind: "skipped" };
+}
+function skippedCodexResult(outputPath) {
+  return { name: "codex", outputPath, exitCode: 0, stderr: "" };
+}
+// src/commands/review/runAndSynthesise.ts
+import { existsSync as existsSync35, unlinkSync as unlinkSync12 } from "fs";
+// src/commands/review/buildReviewerStdin.ts
+var REVIEW_PROMPT = `You are acting as a reviewer for a proposed code change made by another engineer. The full review request \u2014 branch, base, changed files, and unified diff \u2014 is in request.md in the current working directory.
+Read request.md, then produce a thorough code review in Markdown.
+## When to flag a finding
+A finding is worth raising only if all of the following hold:
+1. It meaningfully impacts the accuracy, performance, security, or maintainability of the code.
+2. The issue is discrete and actionable \u2014 not a vague observation about the codebase or a tangle of several things.
+3. Fixing it does not demand more rigour than the rest of the codebase already shows (e.g. don't ask for exhaustive input validation in a repo of one-off scripts).
+4. The issue was introduced by this change. Do not flag pre-existing bugs.
+5. The original author would likely fix it if made aware.
+6. It does not rely on unstated assumptions about the codebase or author's intent.
+7. You can name the concretely affected code path. Speculation that a change *might* disrupt something elsewhere is not enough \u2014 identify the other code that is provably affected.
+8. It is clearly not an intentional change by the author.
+## How to write the comment (Impact + Recommendation)
+1. Make clear *why* the issue is a bug.
+2. Communicate severity accurately \u2014 do not inflate.
+3. Keep it brief: at most one paragraph of prose. Avoid line breaks inside the natural-language flow unless needed for a code fragment.
+4. Do not paste code chunks longer than 3 lines. Wrap short snippets in inline code or a fenced block.
+5. State explicitly the scenarios, environments, or inputs needed for the bug to manifest \u2014 and signal up front that severity depends on those factors.
+6. Tone is matter-of-fact: not accusatory, not gushing. Read as a helpful assistant, not a performative human reviewer.
+7. Write so the author grasps the point on first read.
+8. Avoid flattery and filler ("Great job\u2026", "Thanks for\u2026"). They are not useful to the author.
+Ignore trivial style unless it obscures meaning or violates a documented standard. One finding per distinct issue.
+## How many findings to return
+List every finding that the original author would want to know about and fix. Do not stop at the first qualifying one. If nothing clears the bar above, return no findings \u2014 empty is better than padded.
+## Output format
+For each finding include:
+- Severity (blocker, major, minor, nit) \u2014 see rubric below
+- File and line (e.g. \`src/foo.ts:42\`) when the finding is tied to a specific location
+- Impact: what could go wrong, including the conditions under which it manifests
+- Recommendation: a concrete change
+Severity rubric:
+- **blocker** \u2014 ships broken behaviour: crash, data loss, security hole, breaks the build or existing tests, or violates a stated requirement.
+- **major** \u2014 likely bug, missing error handling on a real failure mode, or a regression in existing behaviour. Not "this could be cleaner" or "this might be slow."
+- **minor** \u2014 narrow correctness or clarity issue with limited blast radius; worth fixing but not urgent.
+- **nit** \u2014 style, naming, micro-refactors, comment wording; reviewer would not block on it.
+Default to the lower tier when uncertain. Code-style preferences, refactor suggestions, and "I would have written it differently" belong in nit \u2014 not major. A finding is only major if you can name a concrete failure mode or regression.
+Group findings by severity. If you have no findings in a category, omit it. End with a short overall summary.
+Output only the review Markdown. Do not include any preamble or commentary about the process.`;
+function buildReviewerStdin(requestPath) {
+  return `${REVIEW_PROMPT}
+The review request is at: ${requestPath}
+`;
 }
 // src/commands/review/printReviewerFailures.ts
@@ -12563,42 +12631,90 @@ function handleChildClose(args) {
   return { exitCode, elapsedMs };
 }
+// src/commands/review/handleSpawnError.ts
+function messageFor(err, command) {
+  if (err.code === "ENOENT") return `command not found: ${command}`;
+  return err.message || String(err);
+}
+function handleSpawnError(ctx, err) {
+  const message = messageFor(err, ctx.command);
+  const stderr = ctx.stderr ? `${ctx.stderr}
+${message}` : message;
+  if (!ctx.quiet) console.error(`[${ctx.name}] failed: ${message}`);
+  return {
+    exitCode: 127,
+    stderr,
+    elapsedMs: Date.now() - ctx.startedAt
+  };
+}
+// src/commands/review/waitForChildExit.ts
+function onErrorResult(ctx, err) {
+  ctx.flushPending();
+  return handleSpawnError(
+    {
+      command: ctx.command,
+      name: ctx.name,
+      stderr: ctx.stderr.value,
+      startedAt: ctx.startedAt,
+      quiet: ctx.quiet
+    },
+    err
+  );
+}
+function onCloseResult(ctx, code) {
+  ctx.flushPending();
+  const closed = handleChildClose({
+    code,
+    startedAt: ctx.startedAt,
+    name: ctx.name,
+    stderr: ctx.stderr.value,
+    quiet: ctx.quiet
+  });
+  return { ...closed, stderr: ctx.stderr.value };
+}
+function waitForChildExit(ctx) {
+  return new Promise((resolve15) => {
+    let settled = false;
+    const settle = (result) => {
+      if (settled) return;
+      settled = true;
+      resolve15(result);
+    };
+    ctx.child.on("error", (err) => settle(onErrorResult(ctx, err)));
+    ctx.child.on("close", (code) => settle(onCloseResult(ctx, code)));
+  });
+}
 // src/commands/review/runStreamingChild.ts
+function writeStdinSafely(child, payload) {
+  child.stdin?.on("error", () => {
+  });
+  try {
+    child.stdin?.write(payload);
+    child.stdin?.end();
+  } catch {
+  }
+}
 function startChild(spec) {
   const child = spawn6(spec.command, spec.args, {
     stdio: ["pipe", "pipe", "pipe"]
   });
   const flushPending = attachLineParser(child, spec.onLine);
   const stderr = attachStderrCollector(child);
-  child.stdin?.write(spec.stdin);
-  child.stdin?.end();
+  writeStdinSafely(child, spec.stdin);
   return { child, flushPending, stderr };
 }
-function waitForExit(ctx) {
-  return new Promise((resolve15, reject) => {
-    ctx.child.on("error", reject);
-    ctx.child.on("close", (code) => {
-      ctx.flushPending();
-      const closed = handleChildClose({
-        code,
-        startedAt: ctx.startedAt,
-        name: ctx.name,
-        stderr: ctx.stderr.value,
-        quiet: ctx.quiet
-      });
-      resolve15({ ...closed, stderr: ctx.stderr.value });
-    });
-  });
-}
 function runStreamingChild(spec) {
   const startedAt = Date.now();
   if (!spec.quiet) console.log(`[${spec.name}] starting`);
   const { child, flushPending, stderr } = startChild(spec);
-  return waitForExit({
+  return waitForChildExit({
     child,
     flushPending,
     stderr,
     name: spec.name,
+    command: spec.command,
     startedAt,
     quiet: spec.quiet ?? false
   });
@@ -12636,6 +12752,19 @@ async function runClaudeReviewer(spec) {
   return finaliseReviewerRun(spec, spinner, result);
 }
+// src/commands/review/resolveClaude.ts
+function resolveClaude(args) {
+  if (args.cached) return Promise.resolve(args.cached);
+  const spinner = args.multi?.create("claude \u2014 starting");
+  return runClaudeReviewer({
+    name: "claude",
+    reviewDir: args.reviewDir,
+    stdin: args.stdin,
+    outputPath: args.claudePath,
+    spinner
+  });
+}
 // src/commands/review/runCodexReviewer.ts
 import { existsSync as existsSync34, unlinkSync as unlinkSync11 } from "fs";
@@ -12696,38 +12825,42 @@ async function runCodexReviewer(spec) {
   return finaliseReviewerRun(spec, spinner, result);
 }
-// src/commands/review/runReviewers.ts
-function spinnerFor(multi, name, cached) {
-  if (cached || !multi) return void 0;
-  return multi.create(`${name} \u2014 starting`);
+// src/commands/review/resolveCodex.ts
+function resolveCodex(args) {
+  if (args.plan.kind === "cached") return Promise.resolve(args.plan.cached);
+  if (args.plan.kind === "skipped") {
+    return Promise.resolve(skippedCodexResult(args.codexPath));
+  }
+  const spinner = args.multi?.create("codex \u2014 starting");
+  return runCodexReviewer({
+    name: "codex",
+    reviewDir: args.reviewDir,
+    stdin: args.stdin,
+    outputPath: args.codexPath,
+    spinner
+  });
 }
+// src/commands/review/runReviewers.ts
 async function runReviewers(reviewDir, claudePath, codexPath, stdinPrompt, options2) {
-  const cachedClaude = cachedReviewerResult("claude", claudePath);
-  const cachedCodex = cachedReviewerResult("codex", codexPath);
-  if (cachedClaude && cachedCodex) {
-    return { results: [cachedClaude, cachedCodex], anyFresh: false };
-  }
-  const { multi } = options2;
-  const claudeSpinner = spinnerFor(multi, "claude", cachedClaude);
-  const codexSpinner = spinnerFor(multi, "codex", cachedCodex);
-  const results = await Promise.all([
-    cachedClaude ? Promise.resolve(cachedClaude) : runClaudeReviewer({
-      name: "claude",
-      reviewDir,
-      stdin: stdinPrompt,
-      outputPath: claudePath,
-      spinner: claudeSpinner
-    }),
-    cachedCodex ? Promise.resolve(cachedCodex) : runCodexReviewer({
-      name: "codex",
-      reviewDir,
-      stdin: stdinPrompt,
-      outputPath: codexPath,
-      spinner: codexSpinner
-    })
-  ]);
-  if (multi) printReviewerFailures(results);
-  return { results, anyFresh: true };
+  const claudePromise = resolveClaude({
+    reviewDir,
+    claudePath,
+    stdin: stdinPrompt,
+    cached: options2.cachedClaude,
+    multi: options2.multi
+  });
+  const codexPromise = resolveCodex({
+    reviewDir,
+    codexPath,
+    stdin: stdinPrompt,
+    plan: options2.codexPlan,
+    multi: options2.multi
+  });
+  const results = await Promise.all([claudePromise, codexPromise]);
+  if (options2.multi) printReviewerFailures(results);
+  const anyFresh = options2.cachedClaude === null || options2.codexPlan.kind !== "cached";
+  return { results, anyFresh };
 }
 // src/commands/review/synthesise.ts
@@ -12736,7 +12869,9 @@ import { readFileSync as readFileSync30 } from "fs";
 // src/commands/review/buildSynthesisStdin.ts
 var SYNTHESIS_PROMPT = `You are consolidating two independent code reviews of the same change. The original review request is in request.md. The two reviews are in claude.md and codex.md in the current working directory.
-Read all three files, deduplicate findings, and produce a single consolidated review in Markdown with this exact structure:
+If codex.md does not exist on disk, the codex reviewer was skipped (CLI unavailable). In that case, work from claude.md alone; treat every finding as 'claude-only', do not mark anything 'confirmed' or 'codex-only', and add a note in the Summary that the codex reviewer was skipped.
+Read all available review files, deduplicate findings, and produce a single consolidated review in Markdown with this exact structure:
 # Code review synthesis
@@ -12816,6 +12951,29 @@ async function synthesise(paths, options2) {
   return result;
 }
+// src/commands/review/runAndSynthesise.ts
+async function runAndSynthesise(args) {
+  const { paths, multi } = args;
+  const { results, anyFresh } = await runReviewers(
+    paths.reviewDir,
+    paths.claudePath,
+    paths.codexPath,
+    buildReviewerStdin(paths.requestPath),
+    { multi, codexPlan: args.codexPlan, cachedClaude: args.cachedClaude }
+  );
+  if (results.every((r) => r.exitCode !== 0)) {
+    console.error(
+      "Both reviewers failed; skipping synthesis. See review folder for stderr details."
+    );
+    return false;
+  }
+  if (anyFresh && existsSync35(paths.synthesisPath)) {
+    unlinkSync12(paths.synthesisPath);
+  }
+  const synthesisResult = await synthesise(paths, { multi });
+  return synthesisResult.exitCode === 0;
+}
 // src/commands/review/useSpinnerUi.ts
 function useSpinnerUi(verbose) {
   if (verbose) return false;
@@ -12837,27 +12995,16 @@ function finishUi(ui, ok) {
   else ui.elapsed.fail(label2);
 }
 async function runReviewPipeline(paths, options2) {
+  const cachedClaude = cachedReviewerResult("claude", paths.claudePath);
+  const codexPlan = await planCodexReviewer(paths.codexPath);
   const ui = createUi(useSpinnerUi(options2.verbose));
   try {
-    const { results, anyFresh } = await runReviewers(
-      paths.reviewDir,
-      paths.claudePath,
-      paths.codexPath,
-      buildReviewerStdin(paths.requestPath),
-      { multi: ui.multi }
-    );
-    if (results.every((r) => r.exitCode !== 0)) {
-      console.error(
-        "Both reviewers failed; skipping synthesis. See review folder for stderr details."
-      );
-      finishUi(ui, false);
-      return false;
-    }
-    if (anyFresh && existsSync35(paths.synthesisPath)) {
-      unlinkSync12(paths.synthesisPath);
-    }
-    const synthesisResult = await synthesise(paths, { multi: ui.multi });
-    const ok = synthesisResult.exitCode === 0;
+    const ok = await runAndSynthesise({
+      paths,
+      cachedClaude,
+      codexPlan,
+      multi: ui.multi
+    });
     finishUi(ui, ok);
     return ok;
   } catch (err) {
@@ -12866,19 +13013,7 @@ async function runReviewPipeline(paths, options2) {
   }
 }
-// src/commands/review/review.ts
-function resolveRepoRoot() {
-  const repoRoot = findRepoRoot(process.cwd());
-  if (repoRoot) return repoRoot;
-  console.error("Error: not inside a git repository.");
-  process.exit(1);
-}
-function validateOptions(options2) {
-  if (options2.apply && options2.refine) {
-    console.error("Error: --apply cannot be combined with --refine.");
-    process.exit(1);
-  }
-}
+// src/commands/review/reviewPr.ts
 function logPriorComments(count) {
   if (count === 0) return;
   console.log(`Including ${count} prior review comment(s) in request.md.`);
@@ -12892,7 +13027,10 @@ function gatherChangedContext() {
   process.exit(1);
 }
 function setupReviewDir(repoRoot, context, force) {
-  const paths = buildReviewPaths(repoRoot, context.branch, context.shortSha);
+  const paths = buildReviewPaths(
+    repoRoot,
+    `${context.branch}-${context.shortSha}`
+  );
   const priorComments = fetchExistingComments();
   logPriorComments(priorComments?.length ?? 0);
   prepareReviewDir(paths, buildRequest(context, priorComments), force);
@@ -12910,9 +13048,7 @@ async function runPostSynthesis(synthesisPath, options2) {
     submit: options2.submit ?? false
   });
 }
-async function review(options2 = {}) {
-  validateOptions(options2);
-  const repoRoot = resolveRepoRoot();
+async function reviewPr(repoRoot, options2) {
   const context = gatherChangedContext();
   const paths = setupReviewDir(repoRoot, context, options2.force ?? false);
   const synthesisOk = await runReviewPipeline(paths, {
@@ -12922,10 +13058,100 @@ async function review(options2 = {}) {
   console.log(`Done. Review folder: ${paths.reviewDir}`);
 }
+// src/commands/review/gatherShaContext.ts
+import { execSync as execSync40 } from "child_process";
+function resolveSha(ref, format2) {
+  const flag = format2 === "short" ? "--short=7 " : "";
+  try {
+    return execSync40(`git rev-parse --verify ${flag}${ref}^{commit}`, {
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    console.error(`Error: could not resolve commit \`${ref}\`.`);
+    process.exit(1);
+  }
+}
+function gatherShaContext(ref) {
+  const sha = resolveSha(ref, "long");
+  const shortSha = resolveSha(sha, "short");
+  const parentSha = resolveSha(`${sha}^`, "long");
+  const range = `${parentSha}..${sha}`;
+  const changedFiles = execSync40(`git diff --name-only ${range}`, {
+    encoding: "utf-8",
+    maxBuffer: 64 * 1024 * 1024
+  }).trim().split("\n").filter(Boolean);
+  const diff2 = execSync40(`git diff ${range}`, {
+    encoding: "utf-8",
+    maxBuffer: 256 * 1024 * 1024
+  });
+  return { sha, shortSha, parentSha, changedFiles, diff: diff2 };
+}
+// src/commands/review/reviewSha.ts
+function gatherShaChangedContext(ref) {
+  const context = gatherShaContext(ref);
+  if (context.changedFiles.length > 0) return context;
+  console.error(
+    `Error: commit ${context.sha} has no changed files \u2014 nothing to review.`
+  );
+  process.exit(1);
+}
+function setupShaReviewDir(repoRoot, context, force) {
+  const paths = buildReviewPaths(repoRoot, context.shortSha);
+  prepareReviewDir(paths, buildShaRequest(context), force);
+  console.log(`Review folder: ${paths.reviewDir}`);
+  return paths;
+}
+async function reviewSha(repoRoot, options2) {
+  const context = gatherShaChangedContext(options2.sha);
+  const paths = setupShaReviewDir(repoRoot, context, options2.force ?? false);
+  await runReviewPipeline(paths, { verbose: options2.verbose ?? false });
+  console.log(`Done. Review folder: ${paths.reviewDir}`);
+}
+// src/commands/review/review.ts
+function resolveRepoRoot() {
+  const repoRoot = findRepoRoot(process.cwd());
+  if (repoRoot) return repoRoot;
+  console.error("Error: not inside a git repository.");
+  process.exit(1);
+}
+function rejectShaFlag(flag) {
+  console.error(`Error: ${flag} cannot be combined with a SHA argument.`);
+  process.exit(1);
+}
+function validateOptions(options2) {
+  if (options2.apply && options2.refine) {
+    console.error("Error: --apply cannot be combined with --refine.");
+    process.exit(1);
+  }
+  if (!options2.sha) return;
+  if (options2.refine) rejectShaFlag("--refine");
+  if (options2.apply) rejectShaFlag("--apply");
+  if (options2.submit) rejectShaFlag("--submit");
+}
+async function review(options2 = {}) {
+  validateOptions(options2);
+  const repoRoot = resolveRepoRoot();
+  if (options2.sha) {
+    await reviewSha(repoRoot, {
+      sha: options2.sha,
+      force: options2.force,
+      verbose: options2.verbose
+    });
+    return;
+  }
+  await reviewPr(repoRoot, options2);
+}
 // src/commands/registerReview.ts
 function registerReview(program2) {
   program2.command("review").description(
-    "Run Claude and Codex in parallel to review the current branch"
+    "Run Claude and Codex in parallel to review the current branch, or a single commit when a SHA is given"
+  ).argument(
+    "[sha]",
+    "Optional commit SHA to review (sha^..sha); when provided, no PR lookup or GitHub posting happens"
   ).option(
     "--no-prompt",
     "Skip confirmation prompts; use flag defaults non-interactively"
@@ -12944,7 +13170,9 @@ function registerReview(program2) {
   ).option(
     "--verbose",
     "Disable spinner UI and use per-line log output (per-tool lines, starting/done lines)"
-  ).action((options2) => review(options2));
+  ).action(
+    (sha, options2) => review({ ...options2, sha })
+  );
 }
 // src/commands/seq/seqAuth.ts
@@ -14218,7 +14446,7 @@ function registerVerify(program2) {
 }
 // src/commands/voice/devices.ts
-import { spawnSync as spawnSync3 } from "child_process";
+import { spawnSync as spawnSync4 } from "child_process";
 import { join as join43 } from "path";
 // src/commands/voice/shared.ts
@@ -14251,7 +14479,7 @@ function getLockFile() {
 // src/commands/voice/devices.ts
 function devices() {
   const script = join43(getPythonDir(), "list_devices.py");
-  spawnSync3(getVenvPython(), [script], { stdio: "inherit" });
+  spawnSync4(getVenvPython(), [script], { stdio: "inherit" });
 }
 // src/commands/voice/logs.ts
@@ -14283,12 +14511,12 @@ function logs(options2) {
 }
 // src/commands/voice/setup.ts
-import { spawnSync as spawnSync4 } from "child_process";
+import { spawnSync as spawnSync5 } from "child_process";
 import { mkdirSync as mkdirSync14 } from "fs";
 import { join as join45 } from "path";
 // src/commands/voice/checkLockFile.ts
-import { execSync as execSync40 } from "child_process";
+import { execSync as execSync41 } from "child_process";
 import { existsSync as existsSync42, mkdirSync as mkdirSync13, readFileSync as readFileSync34, writeFileSync as writeFileSync29 } from "fs";
 import { join as join44 } from "path";
 function isProcessAlive2(pid) {
@@ -14317,7 +14545,7 @@ function bootstrapVenv() {
   if (existsSync42(getVenvPython())) return;
   console.log("Setting up Python environment...");
   const pythonDir = getPythonDir();
-  execSync40(
+  execSync41(
     `uv sync --project "${pythonDir}" --extra runtime --no-install-project`,
     {
       stdio: "inherit",
@@ -14344,7 +14572,7 @@ function setup() {
   bootstrapVenv();
   console.log("\nDownloading models...\n");
   const script = join45(getPythonDir(), "setup_models.py");
-  const result = spawnSync4(getVenvPython(), [script], {
+  const result = spawnSync5(getVenvPython(), [script], {
     stdio: "inherit",
     env: { ...process.env, VOICE_LOG_FILE: voicePaths.log }
   });
@@ -14484,11 +14712,11 @@ import { randomBytes } from "crypto";
 import chalk143 from "chalk";
 // src/lib/openBrowser.ts
-import { execSync as execSync41 } from "child_process";
+import { execSync as execSync42 } from "child_process";
 function tryExec(commands) {
   for (const cmd of commands) {
     try {
-      execSync41(cmd);
+      execSync42(cmd);
       return true;
     } catch {
     }
@@ -14830,11 +15058,11 @@ function resolveParams(params, cliArgs) {
 }
 // src/commands/run/runPreCommands.ts
-import { execSync as execSync42 } from "child_process";
+import { execSync as execSync43 } from "child_process";
 function runPreCommands(pre, cwd) {
   for (const cmd of pre) {
     try {
-      execSync42(cmd, { stdio: "inherit", cwd });
+      execSync43(cmd, { stdio: "inherit", cwd });
     } catch (err) {
       const code = err && typeof err === "object" && "status" in err ? err.status : 1;
       process.exit(code);
@@ -15097,7 +15325,7 @@ function registerRun(program2) {
 }
 // src/commands/screenshot/index.ts
-import { execSync as execSync43 } from "child_process";
+import { execSync as execSync44 } from "child_process";
 import { existsSync as existsSync47, mkdirSync as mkdirSync17, unlinkSync as unlinkSync15, writeFileSync as writeFileSync32 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
 import { join as join51, resolve as resolve13 } from "path";
@@ -15240,7 +15468,7 @@ function runPowerShellScript(processName, outputPath) {
   const scriptPath = join51(tmpdir7(), `assist-screenshot-${Date.now()}.ps1`);
   writeFileSync32(scriptPath, captureWindowPs1, "utf-8");
   try {
-    execSync43(
+    execSync44(
       `powershell -NoProfile -ExecutionPolicy Bypass -File "${scriptPath}" -ProcessName "${processName}" -OutputPath "${outputPath}"`,
       { stdio: ["ignore", "pipe", "pipe"], encoding: "utf-8" }
     );
@@ -15641,7 +15869,7 @@ function syncCommands(claudeDir, targetBase) {
 }
 // src/commands/update.ts
-import { execSync as execSync44 } from "child_process";
+import { execSync as execSync45 } from "child_process";
 import * as path51 from "path";
 function isGlobalNpmInstall(dir) {
   try {
@@ -15649,7 +15877,7 @@ function isGlobalNpmInstall(dir) {
     if (resolved.split(path51.sep).includes("node_modules")) {
       return true;
     }
-    const globalPrefix = execSync44("npm prefix -g", { stdio: "pipe" }).toString().trim();
+    const globalPrefix = execSync45("npm prefix -g", { stdio: "pipe" }).toString().trim();
     return resolved.toLowerCase().startsWith(path51.resolve(globalPrefix).toLowerCase());
   } catch {
     return false;
@@ -15660,18 +15888,18 @@ async function update2() {
   console.log(`Assist is installed at: ${installDir}`);
   if (isGitRepo(installDir)) {
     console.log("Detected git repo installation, pulling latest...");
-    execSync44("git pull", { cwd: installDir, stdio: "inherit" });
+    execSync45("git pull", { cwd: installDir, stdio: "inherit" });
     console.log("Installing dependencies...");
-    execSync44("npm i", { cwd: installDir, stdio: "inherit" });
+    execSync45("npm i", { cwd: installDir, stdio: "inherit" });
     console.log("Building...");
-    execSync44("npm run build", { cwd: installDir, stdio: "inherit" });
+    execSync45("npm run build", { cwd: installDir, stdio: "inherit" });
     console.log("Syncing commands...");
-    execSync44("assist sync", { stdio: "inherit" });
+    execSync45("assist sync", { stdio: "inherit" });
   } else if (isGlobalNpmInstall(installDir)) {
     console.log("Detected global npm installation, updating...");
-    execSync44("npm i -g @staff0rd/assist@latest", { stdio: "inherit" });
+    execSync45("npm i -g @staff0rd/assist@latest", { stdio: "inherit" });
     console.log("Syncing commands...");
-    execSync44("assist sync", { stdio: "inherit" });
+    execSync45("assist sync", { stdio: "inherit" });
   } else {
     console.error(
       "Could not determine installation method. Expected a git repo or global npm install."

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
 	"name": "@staff0rd/assist",
-	"version": "0.219.0",
+	"version": "0.220.1",
 	"type": "module",
 	"main": "dist/index.js",
 	"bin": {